enterprise document manager vulnerabilities and fixes

Recent CVEs affecting enterprise document manager, with upgrade or downgrade steps. 3 tracked.

Also searched as: enterprisedocumentmanager.

enterprise document manager has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-06-27. Highest priority: CVE-2007-3255 (score 43/100).

• CVE-2007-3256 MEDIUM 4.0 UPGRADE UPGRADE Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 a
• CVE-2007-3255 MEDIUM 6.5 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before
• CVE-2007-3254 LOW 3.5 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25

FAQ

How do I fix enterprise document manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise document manager being exploited right now?

None of the tracked enterprise document manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise document manager CVE should I patch first?

CVE-2007-3255 currently ranks highest (43/100): Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before.

RSS feed for enterprise document manager · ← Back to latest CVEs